CVE-2024-41123

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-41123
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41123.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-41123
Aliases
Downstream
Related
Published
2024-08-01T14:18:43.611Z
Modified
2026-06-15T12:20:55.634298655Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
REXML DoS vulnerability
Details

REXML is an XML toolkit for Ruby. The REXML gem before 3.3.2 has some DoS vulnerabilities when it parses an XML that has many specific characters such as whitespace character, >] and ]>. The REXML gem 3.3.3 or later include the patches to fix these vulnerabilities.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41123.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-400"
    ]
}
References

Affected packages

Git / github.com/ruby/rexml

Affected ranges

Type
GIT
Repo
https://github.com/ruby/rexml
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
085def07425561862d8329001168d8bc9c75ae8f
Introduced
1cf37bab79d61d6183bbda8bf525ed587012b718
Fixed
2b285ac0804f2918de642f7ed4646dc6d645a7fc
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.2.7"
        },
        {
            "introduced": "3.2.8"
        },
        {
            "fixed": "3.3.2"
        }
    ],
    "cpe": "cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*",
    "source": "CPE_RANGE"
}

Affected versions

v3.*
v3.1.8
v3.1.9
v3.2.0
v3.2.1
v3.2.2
v3.2.3
v3.2.4
v3.2.5
v3.2.6
v3.2.8
v3.2.9
v3.3.0
v3.3.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41123.json"